Cloud Security Engineer - RBAC, IAM, SIEM

Cloud Security Engineer - RBAC, IAM, SIEM

Security Architecture

Location: Montreal, QC (Hybrid - 3 days/week onsite)

Interview Process: Face-to-Face Interview Required

Experience Required: 4-6 Years

Role Overview

We are seeking a Security Architecture professional with strong expertise in cloud security, application security, and enterprise security engineering. The ideal candidate will be responsible for designing, implementing, and maintaining security controls across cloud, network, server, endpoint, and application environments while ensuring compliance with security standards and best practices.

Essential Skills & Responsibilities

Cloud Security Expertise

• Proven experience managing security across Azure, AWS, and GCP environments.

• Experience implementing Zero Trust architectures.

• Strong knowledge of Microsoft Defender and advanced security analytics.

• Experience with RBAC (Role-Based Access Control) and IAM (Identity and Access Management) for secure access management.

• Knowledge of comprehensive logging practices and secure data transmission using TLS and Syslog.

Application Security Controls

• Strong understanding of application security controls and industry-standard security best practices.

• Experience securing applications throughout the software development lifecycle.

Security Engineering Responsibilities

• Design, implement, and maintain security controls across network, cloud, server, endpoint, and application environments.

• Monitor security events and investigate incidents using SIEM, EDR, and security monitoring tools.

• Perform vulnerability assessments, risk analysis, and remediation tracking.

• Support incident response activities, including threat detection, containment, eradication, and recovery.

Configure and manage security technologies such as:

• Firewalls

• IDS/IPS

• WAF

• DLP

• IAM Solutions

• Endpoint Protection Solutions

• Conduct security assessments and recommend improvements to strengthen the organization's security posture.

• Collaborate with infrastructure, cloud, application, and DevOps teams to integrate security best practices.

• Support security audits, compliance assessments, and regulatory requirements including:

• ISO 27001

• NIST

• SOC 2

• PCI-DSS

• Develop and maintain security policies, procedures, and technical documentation.

• Stay current with emerging cyber threats, vulnerabilities, and industry security trends.

Required Skills

• Cyber Security

• Cyber Security - GRC - Data Security